Qubes 4.0.x USB-C Gigabit Ethernet Adaptor Issues


#1

Good day all,

I recently acquired a Librem 15v3, and bought a USB-C Gigabit Ethernet Adaptor to enable me to cable up from time to time. During testing tonight, I realized a couple of things. The device is seen, and is added to sys_usb, as a notification pops up that the following message: “Device Realtek_USB_100_1000_LAN_000001 is available.”

Running a “lsusb” on sys_usb returns the following for the device:

Bus 003 Device 005: ID Realtek Semiconductor Corp. RTL8153 Gigabit Ethernet Adapter

When I try to use the qubes devices menu to assign it to sys_net, I get a long delay(30 seconds+) before I get the notification telling me that it is attempting to attach the device to sys_net.

During the delay, I can go to sys_net, and use lsusb to see that the device is seen, but after the notification pops up, lsusb returns nothing for the device.

Before notification:

[sys-net ~]$ lsusb
Bus 003 Device 012: ID Realtek Semiconductor Corp. RTL8153 Gigabit Ethernet Adapter
Bus 003 Device 001: ID Linux Foundation 3.0 root hub
Bus 002 Device 001: ID Linux Foundation 2.0 root hub
Bus 001 Device 002: ID Adomax Technology Co., Ltd
Bus 001 Device 001: ID Linux Foundation 2.0 root hub

After notification:

[sys-net ~]$ lsusb
Bus 003 Device 001: ID Linux Foundation 3.0 root hub
Bus 002 Device 001: ID Linux Foundation 2.0 root hub
Bus 001 Device 002: ID Adomax Technology Co., Ltd
Bus 001 Device 001: ID Linux Foundation 2.0 root hub

The device lights up just fine when a network cable is plugged into it, and blinks normally.
Has anyone else had any such fun getting USB-C Gigabit Ethernet devices to work?


#2

This is a a Qubes question rather than a Purism one. In order to use LAN over USB in Qubes 4.0 you need to have the whole USB controller (not only the single device) and the network controller active in the same VM. In effect that means having a combined sys-net and sys-usb Qube. There is an option to configure this during install, otherwise you will have to change it manually now.

Since Librems only have one USB controller for all ports that means you will not be able to connect USB devices without potentially exposing them to your internet connection. Practically the attack surface in sys-net will be very small though since nothing else should really be running there anyway.


#3

Thanks for this reply. Looks like I need to re-evaluate my threat-model, and possibly create a separate sys-usb-net NetVM for when I want to use the USB Gigabit adapter.